[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [XEN PATCH] xen: allow XSM_FLASK_POLICY only if checkpolicy binary is available
- To: George Dunlap <George.Dunlap@xxxxxxxxxx>
- From: Anthony PERARD <anthony.perard@xxxxxxxxxx>
- Date: Fri, 16 Jul 2021 17:27:13 +0100
- Authentication-results: esa6.hc3370-68.iphmx.com; dkim=none (message not signed) header.i=none
- Cc: "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>, "Andrew Cooper" <Andrew.Cooper3@xxxxxxxxxx>, Ian Jackson <iwj@xxxxxxxxxxxxxx>, "Jan Beulich" <jbeulich@xxxxxxxx>, Julien Grall <julien@xxxxxxx>, "Stefano Stabellini" <sstabellini@xxxxxxxxxx>, Wei Liu <wl@xxxxxxx>
- Delivery-date: Fri, 16 Jul 2021 16:27:21 +0000
- Ironport-hdrordr: A9a23:3dMfM65Tw3+5DTUIkAPXwAzXdLJyesId70hD6qkQc3Fom62j5q WTdZEgvyMc5wx/ZJhNo7690cq7MBHhHPxOgbX5VI3KNGXbUQOTR72KhrGSoAEIdReeygZcv5 0QCZSXCrfLfCVHZRCR2njFLz4iquP3j5xBnY3lvhNQpZkBUdAZ0+9+YDzrdXFedU19KrcSMo GT3cZDryrIQwVtUizqbkN1OdQqvrfw5evbXSI=
- Ironport-sdr: edHNbH1WkPWpNT38zJUkfSyUKrpdNHh4gAmX94thIv6UBzjiaByvpDPXJva0UrcTFDPWveceEC JY+JgLNwD8Blve8+JW9ahBLsO+Fz5LB7TfnnpHCH+fgeMrL0i+dqYKy/gQ/at0jSrhIF71Oew0 qZag0w9Dox3arXHAaFIn2sVO8BMdU1dOiuHXC7iedbiSjMN9xBxIPxWEgSXcTWib7Vq4lVVdYb VLEGVjg2ACuRca7rAE1eyiepteJzL06ARlog0n7E5tiOgUH7HNpKxvesU/nUHjf5SLUxorKpEE 3LU=
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
On Fri, Jul 16, 2021 at 04:26:39PM +0100, George Dunlap wrote:
> What this patch does is to make it so that if someone explicitly sets
> CONFIG_XSM_FLASK_POLICY=y, but doesn’t have checkpolicy, the build system
> will silently disable the policy behind their backs without telling them?
FYI, silenty disabling unavailable config options is actually
documented, in "INSTALL", section "Xen Hypervisor". ;-) Well kind of.
--
Anthony PERARD
|
